-
Notifications
You must be signed in to change notification settings - Fork 22
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
No test for multi-step business flows (e.g. password-reset-for-another-user)
enhancementNew feature or requestNew feature or requestStatus: Open.#103 In OWASP/www-project-api-security-testing-framework;GraphQL missing several auxiliary checks: GraphiQL/IDE exposure, deny-list bypass via operation naming, argument-based auth bypass
enhancementNew feature or requestNew feature or requestStatus: Open.#102 In OWASP/www-project-api-security-testing-framework;GraphQL DoS coverage is narrow — no field-duplication, alias-abuse, or circular-fragment tests
enhancementNew feature or requestNew feature or requestStatus: Open.#101 In OWASP/www-project-api-security-testing-framework;GraphQL resolver injection stops after the first confirmed vulnerability, never tests query arguments, and has no SSRF payloads
enhancementNew feature or requestNew feature or requestStatus: Open.#100 In OWASP/www-project-api-security-testing-framework;JWT attack coverage only tests the 'none' algorithm — missing alg-confusion, JKU header, and kid path traversal
enhancementNew feature or requestNew feature or requestStatus: Open.#99 In OWASP/www-project-api-security-testing-framework;No ReDoS (regex denial-of-service) test case
enhancementNew feature or requestNew feature or requestStatus: Open.#98 In OWASP/www-project-api-security-testing-framework;No username/password enumeration or brute-force test
enhancementNew feature or requestNew feature or requestStatus: Open.#97 In OWASP/www-project-api-security-testing-framework;No general-purpose SQL/NoSQL injection test for ordinary REST body/path/query parameters
enhancementNew feature or requestNew feature or requestStatus: Open.#96 In OWASP/www-project-api-security-testing-framework;BOLA/BFLA never test unresolved OpenAPI path-template IDs (e.g. {book_title}, {username}) or non-numeric identifiers
bugSomething isn't workingSomething isn't workingStatus: Open.#95 In OWASP/www-project-api-security-testing-framework;[DOCS] Create API Security Testing Guidelines
documentationImprovements or additions to documentationImprovements or additions to documentationStatus: Open.#24 In OWASP/www-project-api-security-testing-framework;